Google Search: filetype:php login (intitle:phpWebMail|WebMail)
klouw rates this entry 2 out of 10.
Submitted: 2004-07-12 09:33:42
Added by: klouw
PhpWebMail is a php webmail system that supports imap or pop3. It has been reported that PHPwebmail 2.3 is vulnerable. The vulnerability allows phpwebmail users to gain access to arbitrary file system by changing the parameters in the URL used for sending mail (send_mail.php). More info at http://eagle.kecapi.com/sec/fd/phpwebmail.html.